Senior Platform Security Engineer (Zero Trust and Platform Security)

• Start: ASAP
• Type of Contract: Full-time (permanent or freeelance)
• Design and implement key security capabilities for the GPU cloud platform, ensuring that infrastructure, control planes, and multi-tenant workloads operate within a robust zero-trust security model
• This role focuses on securing the platform across identity, networking, infrastructure, platform, and automation layers while enabling high-performance AI workloads to run safely in multi-tenant environments
• As a Senior Platform Security Engineer, you will build security capabilities that integrate deeply with the platform, infrastructure stack, and operational tooling, enabling secure-by-design infrastructure at scale. You will also leverage automation and AI-assisted tooling to improve detection, triage, and response across the platform security stack
• Design and implement zero-trust security architecture across the platform
• Implement identity-aware access controls for infrastructure, services, and operators
• Enforce least-privilege access models for both internal teams and customers
• Secure access paths to infrastructure components including:
• Control planes,
• Orchestration systems,
• Management networks,
• Operational tooling
• Design and operate secure authentication and authorization systems
• Implement IAM capabilities for multi-tenant environments in collaboration with platform and infrastructure teams
• Integrate identity systems with infrastructure and platform components
• Manage cryptographic infrastructure including:
• PKI systems,
• Key management,
• Certificate lifecycle automation
• Secure the underlying infrastructure used by the GPU cloud platform, including:
• Kubernetes clusters,
• Virtualization layers,
• Storage systems,
• Networking fabrics
• Collaborate with infrastructure teams to ensure security is embedded in platform architecture and deployment practices
• Contribute to security guardrails and secure deployment patterns for new infrastructure
• Design and implement security controls for large-scale distributed infrastructure networks
• Implement secure segmentation and tenant isolation mechanisms using technologies such as:
• EVPN / VXLAN,
• VRF isolation,
• Encrypted transport,
• Zero-trust networking
• Work with networking teams to secure high-performance fabrics including RDMA and InfiniBand environments
• Develop automation workflows that improve detection, response, and remediation
• Build integrations between security systems and operational tooling
• Automate vulnerability triage, remediation workflows, and incident response processes
• Contribute to SOAR-style automation systems that coordinate security operations across the platform
• Support security monitoring and detection systems
• Investigate and triage security alerts and potential vulnerabilities
• Participate in incident response and post-incident analysis
• Improve detection coverage and response automation across the platform
• Design and maintain patch management strategies across the platform infrastructure, including:
• Operating systems,
• Container runtimes,
• Kernel updates,
• Infrastructure components
• Build automation pipelines that validate and deploy security updates across large infrastructure fleets
• Track vulnerabilities and coordinate remediation across engineering teams
• Maintain vulnerability remediation workflows and reporting for security posture visibility
• Build and maintain security monitoring pipelines that ingest signals from infrastructure, networking, and platform components
• Improve signal quality from SIEM platforms by developing correlation rules, enrichment pipelines, and automated triage workflows
• Integrate security telemetry with platform observability systems to provide a unified view of infrastructure health and security posture
• Design and implement AI-assisted security workflows that analyze security telemetry and incident signals
• Develop AI agents that help:
• Summarize security alerts,
• Correlate events across systems,
• Detect anomaly patterns,
• Assist operators during incident investigations
• Use machine learning or LLM-based tooling to reduce alert fatigue and accelerate incident triage
• Help ensure platform security controls meet customer and regulatory requirements
• Contribute to security policies and operational procedures
• Help define measurable security metrics and compliance validation processes
• Technical Stack
• Security Monitoring & Detection
• Wazuh
• Snort IDS/IPS
• TheHive
• Cortex
• Security Infrastructure
• Wazuh SIEM
• HashiCorp Vault
• HashiCorp Boundary
• Tailscale
• Identity & Access
• PKI infrastructure
• IAM systems such as Authentik/KeyCloak
• Certificate lifecycle management
• Identity federation
• Secure Networking
• Zero-trust networking models
• Encrypted network transport
• Network segmentation technologies
• Citrix NetScaler
• Platform Security
• Kubernetes security
• Container runtime security
• Infrastructure hardening
• Security Automation
• Python / Go
• Security automation frameworks
• Incident response automation

Benefits

• 401k Employee volunteer contribution Plan
• Medical Insurance Plan
• You´ll be part of a fast-growing scale-up with a mission to make a positive impact, offering an exciting career evolution
• A great work environment characterised by friendliness, international diversity, flexibility, and a hybrid-friendly approach- Experience securing large-scale distributed infrastructure platforms
• 7+ years of experience in cloud security or infrastructure security engineering
• Strong understanding of security architecture in cloud environments
• Experience securing Kubernetes and containerized platforms
• Familiarity with multi-tenant infrastructure security models
• Strong understanding of PKI, key management, and secure authentication systems
• Experience implementing identity and access management systems
• Familiarity with segmentation, tenant isolation, and zero-trust networking
• Understanding of datacenter networking security concepts
• Experience with SIEM platforms and security telemetry
• Experience building security automation workflows
• Ability to triage vulnerabilities and investigate incidents